Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
File: 15D759D621CE11EC99FD3C45D8A014CE.roa (raw, json)
Hash identifier: Z0x5EekFveN2pWj6qKvIhL9pU7FdgGYeZB/I/R2XBNw=
Subject key identifier: 8D:DA:90:20:54:CB:79:7B:C5:19:95:35:91:24:59:D2:6F:14:10:34
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 15
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:09:15 +0000
ROA not before: Thu 30 Sep 2021 09:09:09 +0000
ROA not after: Sat 30 Sep 2023 09:09:09 +0000
asID: 328327
IP address blocks: 102.140.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:09:09 2021 GMT
Not After : Sep 30 09:09:09 2023 GMT
Subject: CN=61557ebb-1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:b2:1e:96:93:f6:66:ac:28:67:5c:b5:3f:
a2:ca:66:97:f3:a9:fa:f1:97:f0:04:5a:c4:f3:19:
7e:58:16:07:03:3e:b2:93:e9:37:43:c4:4a:33:8d:
9f:d0:02:0c:41:d0:e6:fd:a8:ef:cd:a4:4d:8d:59:
17:7b:72:76:cb:00:68:0a:e2:11:24:57:34:c8:5e:
33:72:6a:a6:ab:2e:51:2f:c2:a2:ef:ee:31:7e:4f:
23:2f:43:71:b4:e8:e8:7a:6e:a5:f4:da:01:03:cf:
9d:5d:c1:b0:36:2f:33:1c:11:04:77:33:e8:f9:9b:
39:24:7a:28:b8:f9:04:d7:9a:44:5f:42:a6:ad:83:
b6:e1:9b:b1:ea:bb:44:a4:e3:fb:86:7f:70:c0:0f:
a7:cd:89:9c:f7:6d:ce:24:63:ed:0c:3b:69:a6:0e:
8b:6c:91:59:cc:5a:f6:4c:6e:3d:2e:ce:62:8d:9f:
3f:47:47:a5:26:fd:55:1b:46:0b:ff:e3:f0:ac:ad:
18:db:1a:58:ec:ea:18:6c:74:04:3c:eb:dc:84:f5:
da:29:33:4d:76:07:94:23:33:cf:08:56:68:ea:91:
1f:4a:fe:da:cf:d8:6a:04:f9:e5:0a:77:ab:b7:94:
2c:9c:8d:87:2c:2e:35:03:9f:43:9f:e4:ce:f0:a8:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:90:20:54:CB:79:7B:C5:19:95:35:91:24:59:D2:6F:14:10:34
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:26:1f:f6:eb:4c:91:4d:98:3d:a1:1b:b7:de:97:73:48:6a:
14:c1:ab:09:53:85:31:c0:f6:2e:ab:ae:f1:9c:3e:dd:88:bd:
fb:c9:94:2e:19:82:9a:14:ee:cb:c5:e0:6c:ed:af:57:88:c6:
ce:41:28:dd:c7:d5:d6:e5:0a:9d:39:db:6b:39:74:31:8a:bf:
ce:78:ea:a5:f0:05:27:ee:cf:06:e2:68:08:54:d2:53:71:bb:
83:93:3a:fb:aa:48:c7:f3:44:29:b1:c7:71:a4:35:ca:43:86:
b3:52:bc:01:75:18:96:3e:c3:eb:e2:ad:89:98:f3:32:d4:a4:
33:e3:49:de:ca:b4:6b:77:4e:18:98:2f:b5:c9:27:f0:fc:68:
97:d0:6f:fa:bc:80:7b:b6:f8:c0:5a:26:b8:b3:f8:e1:00:6f:
d4:f3:de:97:d5:47:ad:d4:1c:22:b8:19:19:d4:cb:be:df:be:
29:1b:af:71:76:d7:8c:b5:63:f9:55:77:95:79:89:3f:c3:12:
73:1c:0c:0f:a5:20:22:07:9a:b7:d9:a1:ce:cd:2a:70:9b:49:
5b:dc:b0:cf:e7:ad:9f:06:da:c5:fb:7b:ea:86:fb:7a:54:e3:
b9:34:4e:f3:53:4b:ca:03:78:39:4c:8b:c9:ce:c3:85:5f:68:
90:03:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org